jokod/impactco2-php

Repo bus factorcaution

All 14 recent commits came from one contributor, so maintenance continuity depends heavily on a single person.

Repo toolingcaution

Composer and Make tooling are present, but no security-scanning tools were detected, leaving a modest verification gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

All three workflows were analyzed without high-confidence audit findings or untrusted-code sinks, but all 9 action references are unpinned and two workflows grant top-level write access, creating workflow hygiene risk.